Seeing the recent question on Marks with IPv6 I went back to review a setup I'm currently testing.
In my tcrules file I have: CONTINUE $FW - - - - - !0x0 This generates the following mangle rule: -A tcout -m mark ! --mark 0x0/0xff -j RETURN But based on my config file: TC_BITS=8 PROVIDER_BITS=8 PROVIDER_OFFSET=8 MASK_BITS=8 ZONE_BITS=0 Shouldn't that read: -A tcout -m mark ! --mark 0x0/0xff00 -j RETURN All the other mark "tests" specify a mask of 0xff00 Cheers. ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users